Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
File:                     LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft (raw, json)
Hash identifier:          K7+C12sEkhfu8rU+KCPvLINBBJtyyh2c6t7dVsTN4mE=
Subject key identifier:   EC:07:80:49:30:4E:53:C4:07:C3:12:CE:5C:5F:52:9A:F8:66:4F:0E
Authority key identifier: 2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
Certificate issuer:       /CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Certificate serial:       0195E1223D42992431ACB14EFB9EA9AB2311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
Manifest number:          60
Signing time:             Sat 29 Mar 2025 09:01:12 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:12 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:12 +0000
Files and hashes:         1: LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl (hash: gLthOArQdQx5iG6bmjlBxuTMagiBfuqp0dt1e27Nw6Y=)
                          2: gH-hksMyjADdSnLZQyC57cd6lrA.roa (hash: hDYDdACy3gd+GmXhVoi6Clu3jpw70AyqVE9omGwk5CE=)
                          3: w9h083wG9ItaPjH-_63uYE6KznA.roa (hash: V3Tb51WvY6giQH0ElaZuODezIpP/3ZCphM9ap9vb4L0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:3d:42:99:24:31:ac:b1:4e:fb:9e:a9:ab:23:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e210bd2c7cbef20f224a47b32a157318888ec85
        Validity
            Not Before: Mar 29 09:01:12 2025 GMT
            Not After : Mar 30 09:01:12 2025 GMT
        Subject: CN=ec078049304e53c407c312ce5c5f529af8664f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:bf:2e:72:8b:35:21:e7:06:09:84:d0:5d:
                    10:2d:ac:6e:6d:22:a8:24:ae:0c:f8:6f:34:3c:9e:
                    d4:da:bd:a5:1d:fb:b0:f5:2c:17:37:a9:1b:1f:de:
                    37:73:4e:76:cb:d4:cf:93:21:34:38:1b:89:d8:52:
                    0e:59:a9:a1:b5:13:f1:e7:b7:7f:34:7f:6a:37:5b:
                    82:c1:11:14:e2:c6:a2:15:08:ef:04:29:c9:60:66:
                    1c:b5:6c:a2:8d:45:35:70:e1:13:74:a5:56:7b:a2:
                    af:21:7e:05:61:e9:72:14:b8:f8:84:54:f3:3c:ae:
                    f2:c7:3d:05:31:84:3a:f3:fc:c4:1c:f4:43:ad:fa:
                    29:36:6d:f2:c9:24:0a:e5:d1:bb:03:be:db:ad:78:
                    f2:f6:e2:cf:b0:99:cf:7d:60:1d:52:98:70:0b:6d:
                    b9:3a:b0:fa:ae:bc:16:47:a4:c4:89:fe:69:eb:69:
                    3f:6a:96:11:16:d5:15:4f:f5:65:43:e3:21:73:1c:
                    55:57:cd:0e:98:d3:1e:74:d6:79:c9:5a:be:03:9b:
                    cf:d1:b8:27:67:86:41:ba:e4:d8:8a:83:dd:86:78:
                    c3:0b:5b:7c:26:a4:c4:44:c5:5e:8f:7f:63:db:05:
                    58:d0:7e:20:ca:5e:61:3f:39:57:44:ec:90:aa:b6:
                    a8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:07:80:49:30:4E:53:C4:07:C3:12:CE:5C:5F:52:9A:F8:66:4F:0E
            X509v3 Authority Key Identifier:
                keyid:2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:56:d0:46:9c:83:da:ba:6d:0f:99:13:2d:bb:bc:6b:4b:c7:
         03:99:4f:66:a5:70:70:23:42:cb:cb:43:b1:78:8d:05:5f:a3:
         11:22:d0:fb:65:31:65:a6:62:e7:91:5a:fb:85:53:98:73:1f:
         74:87:56:29:6e:b1:6d:f5:49:89:f5:81:42:33:a0:cb:03:5e:
         25:6a:6a:f1:cf:ef:bf:4e:f8:0e:b8:02:0f:68:2a:94:e0:10:
         22:59:93:19:c8:b0:c2:4e:d8:73:5d:a0:89:b0:91:13:12:95:
         a3:6e:64:75:78:9f:28:ee:6e:57:76:2c:24:92:3f:74:a3:23:
         7c:8b:7f:9e:aa:2d:82:20:b9:f9:25:2d:2a:79:28:fb:73:55:
         74:2d:26:83:b2:2d:3c:e7:93:b6:06:73:8d:81:91:9f:d7:ac:
         60:1c:89:a5:84:28:f8:1e:fa:bc:09:0f:0d:ba:92:79:60:53:
         69:b1:be:30:85:6d:36:95:22:b8:32:32:28:3b:2c:93:3b:fc:
         07:e1:58:51:05:11:34:c2:6e:ee:43:7f:cf:b9:21:52:3b:2a:
         2e:6a:28:b7:54:18:c8:23:da:af:44:2e:98:7c:a4:f1:05:5b:
         8c:70:33:6e:e3:2a:e0:b0:58:0d:05:f1:e2:8d:0c:ca:f5:6b:
         6f:85:d9:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhIj1CmSQxrLFO+56pqyMRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMjEwYmQyYzdjYmVmMjBmMjI0YTQ3YjMyYTE1NzMxODg4
OGVjODUwHhcNMjUwMzI5MDkwMTEyWhcNMjUwMzMwMDkwMTEyWjAzMTEwLwYDVQQD
EyhlYzA3ODA0OTMwNGU1M2M0MDdjMzEyY2U1YzVmNTI5YWY4NjY0ZjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc2/LnKLNSHnBgmE0F0QLaxubSKo
JK4M+G80PJ7U2r2lHfuw9SwXN6kbH943c052y9TPkyE0OBuJ2FIOWamhtRPx57d/
NH9qN1uCwREU4saiFQjvBCnJYGYctWyijUU1cOETdKVWe6KvIX4FYelyFLj4hFTz
PK7yxz0FMYQ68/zEHPRDrfopNm3yySQK5dG7A77brXjy9uLPsJnPfWAdUphwC225
OrD6rrwWR6TEif5p62k/apYRFtUVT/VlQ+MhcxxVV80OmNMedNZ5yVq+A5vP0bgn
Z4ZBuuTYioPdhnjDC1t8JqTERMVej39j2wVY0H4gyl5hPzlXROyQqraojQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwHgEkwTlPEB8MSzlxfUpr4Zk8OMB8GA1UdIwQY
MBaAFC4hC9LHy+8g8iSkezKhVzGIiOyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGlFTDBzZkw3eUR5SktSN01xRlhNWWlJN0lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8wYTRmZGMtYTg2OS00M2I3LWJiZDAt
YmY5MGQwMTUxYjUzLzEvTGlFTDBzZkw3eUR5SktSN01xRlhNWWlJN0lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8wYTRmZGMtYTg2OS00M2I3LWJiZDAtYmY5MGQwMTUxYjUz
LzEvTGlFTDBzZkw3eUR5SktSN01xRlhNWWlJN0lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlbQRpyD
2rptD5kTLbu8a0vHA5lPZqVwcCNCy8tDsXiNBV+jESLQ+2UxZaZi55Fa+4VTmHMf
dIdWKW6xbfVJifWBQjOgywNeJWpq8c/vv074DrgCD2gqlOAQIlmTGciwwk7Yc12g
ibCRExKVo25kdXifKO5uV3YsJJI/dKMjfIt/nqotgiC5+SUtKnko+3NVdC0mg7It
POeTtgZzjYGRn9esYByJpYQo+B76vAkPDbqSeWBTabG+MIVtNpUiuDIyKDsskzv8
B+FYUQURNMJu7kN/z7khUjsqLmoot1QYyCPar0QumHyk8QVbjHAzbuMq4LBYDQXx
4o0MyvVrb4XZkA==
-----END CERTIFICATE-----